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t . (OriginaO An authentication method comprising the steps of: 

gesnerating a first security context in response to a first user authentication; 
generating a second security context in response to a secotid user authentication, 
wherein said second security context aggregates said first security context and a security 
context coiresponding to an identity in said second user authoitication. 

2. (Original) The method of claim 1 further comprising the step of saving said first 
security context. 



3. (Original) The method of claim 2 wherein said step of saving said first security 
context comprises the step of pushing said fir$t security context on a stack. 

4. (Original) The method of claim 1 further comprising the step of receiving a user 
logoff. 



5. (Original) The method of claim 4 further comprising the step of destixjying said 
second security context in response to said step of receiving said user logofif. 

6. (Original) The method of claim 2 fijrther comprising the step of reverting to said 
first security context in responsie to a user logoff". 

7. (Original) The method of claim 6 uiierein said step of reverting to said first 
security context comprises the step of popping said first security context off of a stack. 

8. (Original) The method of claim 1 further comprising the step of detennimng an 
access permission in response to said second security context 
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9. (Original) A coniputCT program product embodied in a tangible storage 

the program product comprising a program of instructions for perfonnmg the method 
steps of: 

generating a first security context in response to a first user authentication; 

generating a second security context in response to a second user authentication, 
wherein said second security context aggregates said first security context and a security 
context corresponding to an identity in said second user authentication, 

10. (Original) The program product of claim 9 further comprising instructions for 
performing the step of saving said first security context. 

1 1 . (Original) The program product of claim 10 wherein said step of saving said first 
security context comprises the step of pushing said first security context on a stadk, 

12. (Original) The program product of claim 9 further comprising instructions for 
performing the step of receiving a user logoff. 

13. (Original) The program product of claim 12 further comprising instructions for 
performing the step of destroying said second security context in response to said step of 
receiving said user logoff. 

14. (Original) The program product of claim 10 further comprising instructionsS for 
petfoiming the step of reverting to said first security context in response to a user logoff. 

15. (Original) The program product of claim 14 wherein said step of reverting to said 
first security context comprises the step of popping said first security context off of a 
stack. 

1 6. (Original) The program product of claim 9 further comprising instructions for 
performing the step of determining an access pennission in response to said second 
security context 
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1 7. (Original) A data processing system comprising: 

circuitry operable for generating a first security context in response to a firet user 
authentication; 

circuitry operable for generating a second security context in response to a second 
user authentication, wherein said second security context aggregates said first security 
context and a security context corresponding to an identity in said second user 
authentication. 

18. (Original) The system of claim 17 farther comprising circuitry operable for 
saving said first security context 



1 9. (Original) The system of claim 1 8 wherein said circuitry operable for saving said 
first security context comprises the step of pushing said first security context on a stack. 

20. (Original) The system of claim 1 7 further comprising circuitry operable for 
receiving a user logoff 

21 . (Original) The system of claim 20 further comprising circuitry operable for 
destroying said second security context in response to said step of receiving said user 
logoff. 

22. (Original) The system of claim 1 8 further comprising circuitry operable for 
reverting to said first security context in response to a user logoff. 

23. (Original) The system of claim 22 wherein said circuitry operable for reverting to 
said first security context comprises circuity operable for popping said first security 
context off of a stack. 



24. (Original) The system of claim ] 7 further comprising drcuitry operable for 
detemiining an access permission in response to said second security context 
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